Skip to content
OpenAdvisories

Archive

September 1999

Vulnerabilities first published in this month (UTC), newest first.

← August 1999 1999 / September October 1999 →
  1. 1 
  2. 2 
  3. 3 
  4. 4 
  5. 5 
  6. 6 
  7. 7 
  8. 8 
  9. 9 
  10. 10 
  11. 11 
  12. 12 
  13. 13 
  14. 14 
  15. 15 
  16. 16 
  17. 17 
  18. 18 
  19. 19 
  20. 20 
  21. 21 
  22. 22 
  23. 23 
  24. 24 
  25. 25 
  26. 26 
  27. 27 
  28. 28 
  29. 29320
  30. 30 
All Critical High Medium Low Exploited only Public exploit

320 results · Feed

  • Unscored —
    CVE-1999-0016 Public exploit EPSS 96%

    Land IP denial of service.

  • Unscored —
    CVE-1999-0368 Public exploit EPSS 40%

    Buffer overflows in wuarchive ftpd (wu-ftpd) and ProFTPD lead to remote root access, a.k.a. palmetto.

  • Unscored —
    CVE-1999-0371

    Lynx allows a local user to overwrite sensitive files through /tmp symlinks.

  • Unscored —
    CVE-1999-0062

    The chpass command in OpenBSD allows a local user to gain root access through file descriptor leakage.

  • Critical 9.8
    CVE-1999-0066 Public exploit EPSS 12%

    AnyForm CGI remote execution.

  • Unscored —
    CVE-1999-0234

    Bash treats any character with a value of 255 as a command separator.

  • High 8.4
    CVE-1999-0036 Public exploit

    IRIX login program with a nonzero LOCKOUT parameter allows creation or damage to files.

  • Unscored —
    CVE-1999-0134

    vold in Solaris 2.x allows local users to gain root access.

  • High 7.8
    CVE-1999-0022

    Local user gains root privileges via buffer overflow in rdist, via expstr() function.

  • Unscored —
    CVE-1999-0301 Public exploit

    Buffer overflow in SunOS/Solaris ps command.

  • Unscored —
    CVE-1999-0362

    WS_FTP server remote denial of service through cwd command.

  • Unscored —
    CVE-1999-0164

    A race condition in the Solaris ps command allows an attacker to overwrite critical files.

  • Unscored —
    CVE-1999-0471

    The remote proxy server in Winroute allows a remote attacker to reconfigure the proxy without authentication through th…

  • Unscored —
    CVE-1999-0141

    Java Bytecode Verifier allows malicious applets to execute arbitrary commands as the user of the applet.

  • Unscored —
    CVE-1999-0463

    Remote attackers can perform a denial of service using IRIX fcagent.

  • Unscored —
    CVE-1999-0303

    Buffer overflow in BNU UUCP daemon (uucpd) through long hostnames.

  • Unscored —
    CVE-1999-0375

    Buffer overflow in webd in Network Flight Recorder (NFR) 2.0.2-Research allows remote attackers to execute commands.

  • Unscored —
    CVE-1999-0485

    Remote attackers can cause a system crash through ipintr() in ipq in OpenBSD.

  • Unscored —
    CVE-1999-0221

    Denial of service of Ascend routers through port 150 (remote administration).

  • Unscored —
    CVE-1999-0342

    Linux PAM modules allow local users to gain root access using temporary files.

  • Unscored —
    CVE-1999-0264 Public exploit

    htmlscript CGI program allows remote read access to files.

  • Unscored —
    CVE-1999-0316

    Buffer overflow in Linux splitvt command gives root access to local users.

  • Unscored —
    CVE-1999-0424

    talkback in Netscape 4.5 allows a local user to overwrite arbitrary files of another user whose Netscape crashes.

  • Unscored —
    CVE-1999-0113 Public exploit EPSS 17%

    Some implementations of rlogin allow root access if given a -froot parameter.

  • Unscored —
    CVE-1999-0181

    The wall daemon can be used for denial of service, social engineering attacks, or to execute remote commands.

  • Unscored —
    CVE-1999-0026 Public exploit

    root privileges via buffer overflow in pset command on SGI IRIX systems.

  • Unscored —
    CVE-1999-0096

    Sendmail decode alias can be used to overwrite sensitive files.

  • Unscored —
    CVE-1999-0206

    MIME buffer overflow in Sendmail 8.8.0 and 8.8.1 gives root access.

  • Unscored —
    CVE-1999-0353

    rpc.pcnfsd in HP gives remote root access by changing the permissions on the main printer spool directory.

  • Unscored —
    CVE-1999-0404 Public exploit

    Buffer overflow in the Mail-Max SMTP server for Windows systems allows remote command execution.

  • Unscored —
    CVE-1999-0177

    The uploader program in the WebSite web server allows a remote attacker to execute arbitrary programs.

  • Unscored —
    CVE-1999-0019

    Delete or create a file via rpc.statd, due to invalid information.

  • High 8.4
    CVE-1999-0069 Public exploit

    Solaris ufsrestore buffer overflow.

  • Unscored —
    CVE-1999-0190

    Solaris rpcbind can be exploited to overwrite arbitrary files and gain root access.

  • Unscored —
    CVE-1999-0373

    Buffer overflow in the "Super" utility in Debian GNU/Linux, and other operating systems, allows local users to execute …

  • Medium 5.4
    CVE-1999-0035

    Race condition in signal handling routine in ftpd, allowing read/write arbitrary files.

  • Unscored —
    CVE-1999-0103 Public exploit EPSS 15%

    Echo and chargen, or other combinations of UDP services, can be used in tandem to flood the server, a.k.a. UDP bomb or …

  • Unscored —
    CVE-1999-0239 Public exploit

    Netscape FastTrack Web server lists files when a lowercase "get" command is used instead of an uppercase GET.

  • Unscored —
    CVE-1999-0420

    umapfs allows local users to gain root privileges by changing their uid through a malicious mount_umap program.

  • Unscored —
    CVE-1999-0018 Public exploit EPSS 10%

    Buffer overflow in statd allows root privileges.